Microsoft Intune | Control Over Your Devices

Introduction to Device Management

With the increase in remote work, businesses, both large and small, must consider a mobile device management solution. This aspect is not a luxury, but rather a requirement for providing the most effective control. Additionally, a missing mobile device could occur at any time. As a result, there are numerous solutions available, with Microsoft Intune being one of the best.

Microsoft Intune

Intune is Mobile Device & Application Management (MDM&MAM). It brings control over how your organization’s devices, such as mobile phones, tablets, and laptop computers, are used. With Intune, you can manage multiple devices per person, and the different platforms that run on each device, including iOS/iPadOS, macOS, Android, and Windows. Intune separates policies and settings by device platform. So it’s easy to manage and view devices of a specific platform.

Intune includes the following integration options.

Integration with AAD for Access
Integration with Azure Information Protection for data protection
Integration with Microsoft 365 suite of products

Capabilities

Here are some examples of what you can do with Intune.

Device Management
Application Management
Compliance and Conditional Access
Solve Common Business Problems Intune Solves
Define Your Own App Protection Policies
Remotely Managed Devices
Reports and System Logs

Management

Start Managing Devices

Organizations can safeguard their data and resources from various devices by using device management. Enrolling the devices with intune will give you the option to manage their usage with policies. You can controll their settings like their paswword, rules and settings.

You can use Intune to set rules and configure settings on personal and corporate-owned devices to access data and networks.

Apps can be deployed and authenticated on all on-premise and mobile devices.
Control how users access and share information to protect your company’s information.
Check that your devices and apps meet your security requirements.

When devices are enrolled and managed in Intune, administrators can:

See the devices enrolled and get an inventory of devices accessing organization resources.
Configure devices, so they meet your security and health standards. For example, you probably want to block jailbroken devices.
Push certificates to devices so users can easily access your Wi-Fi network or use a VPN to connect to your network.
See reports on users and devices compliance.
Remove organization data if a device is lost, stolen, or not used anymore.

Start Managing Applications

Intune allows you to create, publish, push, configure, secure, monitor, and update mobile apps for your users Within an application, MAM allows you to manage and protect your organization’s data within the application.

Manage apps from the Company Portal website

Use cases

Protecting your on-premises email and data so it can be safely accessed by mobile devices
Protecting your Microsoft 365 email and data so it can be safely accessed by mobile devices
Offer a bring your own device program to all employees
Issue corporate-owned phones to your employees
Issue limited-use shared tablets to your employees
Enable your employees to securely access Microsoft 365 from an unmanaged public kiosk

Intune & Azure Active Directory

Intune integrates with Azure AD to enable a broad set of access control scenarios such as Conditional Access. These powerful services, when combined, provide control over your company’s devices and easy access to internal resources, allowing your team to stay productive from any device.

Get started with intune

First you have to start with this set up page.

Intune set up account

If your organization has its own custom domain that you want to use without .onmicrosoft.com, you can change that in the Microsoft 365 admin center

When you’re finished, you can move on to the custom domain.

Configure your custom domain name

Interactive Guide w/ MS endpoint manager

Confirm your licenses

When you sign up for the Intune free trial, a Microsoft Intune license is created for you. You will also receive a trial Enterprise Mobility + Security (EMS) subscription as part of this trial.

Click here to confirm the licenses

How to interact with Intune?

You will most frequently use two portals:

The Microsoft Endpoint Manager admin center

This is where you can explore the capabilities of Intune. It is a one-stop shop to manage and complete tasks for your mobile devices. This admin center includes the services used for device management, including Intune and Azure Active Directory, and to also manage client apps.

One of these can be accomplished in the Device Management admin center.

Enroll devices
Set device compliance
Manage devices
Manage apps
iOS eBooks
Install Exchange on-premises connector
Manage roles
Manage software updates
Manage Windows client updates
Manage iOS/iPadOS updates
Azure active directory
Manage users
Manage groups and members
Troubleshoot

The Microsoft 365 admin center

This is where you can add and manage users, if you are not using Azure Active Directory for this. You can also manage other aspects of your account, including billing and support.

Do you want to go further?

Intune is a good Microsoft product that is Agile and simple for deploying MDM solution that covers the greatest number of policies while also being stable, scalable, and safeguards your company’s data as well as allowing you to control how your employees access and share business information.

Now that you have a sense of Intune, you can continue by configuring it to enable mobile device management and gain the control.

Set up Intune!